Not rated
CVE-2019-10537 Improper validation of event buffer extracted from FW response can lead to integer overflow, which will allow to pass…
Description
Improper validation of event buffer extracted from FW response can lead to integer overflow, which will allow to pass the length check and eventually will lead to buffer overwrite when event data is copied to context buffer in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9607, Nicobar, QCA6574AU, QCN7605, QCS405, QCS605, SDM660, SDM845, SDX55, SM6150, SM7150, SM8150, SM8250, SXR1130, SXR2130
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music | Versions not published |
References
- www.qualcomm.com www.qualcomm.com
Timeline
- Published
- Last modified
Other CVEs of Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music
The 15 CVEs of Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music →
CVE-2019-10598
Out of bound access can occur while processing peer info in IBSS connection mode due to lack of upper bounds check to…
Not rated
CVE-2019-10557
Out-of-bound read in the wireless driver in the Linux kernel due to lack of check of buffer length
Not rated
CVE-2018-11980
When a fake broadcast/multicast 11w rmf without mmie received, since no proper length check in wma_process_bip, buffer…
Not rated
CVE-2019-2268
Possible OOB read issue in P2P action frames while handling WLAN management frame in Snapdragon Auto, Snapdragon…
Not rated